Comments for XEN-trifuge

Comment on Doing it Cheap, and Right, with Kiwi Syslog Server, SQL and Netscaler Application Firewall by LeeE

LeeE — Tue, 03 Apr 2012 22:57:03 +0000

Just don’t care for the licensing model.

Comment on Doing it Cheap, and Right, with Kiwi Syslog Server, SQL and Netscaler Application Firewall by John M. Smith

John M. Smith — Tue, 03 Apr 2012 14:20:58 +0000

Hey man, thanks for the comment, I started revisiting splunk when the hired Brandon Shell and I do like what I see, also on the threat front, this guy (Mark Seward) is DEAD ON.

http://www.splunk.com/view/SP-CAAAGMN

Comment on Doing it Cheap, and Right, with Kiwi Syslog Server, SQL and Netscaler Application Firewall by jwconger74

jwconger74 — Tue, 03 Apr 2012 13:34:23 +0000

Disclaimer – I work at Splunk

Nice write up. I’m a _big_ fan of what you have done with gathering threat information here (as well as how you’ve done similar things with EdgeSight -> https://twitter.com/JasonConger/statuses/93389868490702848).

I just wanted to point out that Splunk does have a free version that can be used with Netscaler. The free version does almost everything that the enterprise version does, but it is limited to how much data you can throw at it in a day. http://www.splunk.com/view/free-vs-enterprise/SP-CAAAE8W

I’m also a big SQL fan and learning how to do some of the same things in Splunk took a paradigm shift in my thinking, but I’m digging it now. Splunk takes the raw data and doesn’t change it to fit a schema (in fact, the raw data is never changed at all). All the schema stuff is built on-the-fly and you can join a whole lot of disparate data from all kinds of sources (SQL, log files, AD, scripts, CSV, network directories, etc.).

Comment on Extending the Rudder by Doctors Using iPads Biggest Headache for Hospital IT - Things of interest to a medical librarian. - Krafty Librarian

Tue, 09 Aug 2011 16:16:02 +0000

[...] systems don’t work with these new devices. On his own blog, John’s post Extending the Rudder goes into more depth about the security, mobile platforms, and thin [...]

Comment on Will that be Paper or Panic? by John M. Smith

John M. Smith — Sun, 22 May 2011 02:56:48 +0000

Hey thanks!

Comment on Will that be Paper or Panic? by Lynn

Lynn — Sun, 22 May 2011 01:07:04 +0000

Glad I’ve finally found someinthg I agree with!

Comment on Setting up AAA Authentication for Extranet Websites by Stefan

Stefan — Mon, 21 Feb 2011 11:21:01 +0000

Hi John

great tutorial! Thank you for your work. I’m just wondering how I get a “Logout” button implemented. So people can log off from the Extranet & the session is termianted properly.

Best regards

Stefan

Comment on Project Poindexter:VPN Logs by John M. Smith

John M. Smith — Sun, 24 Oct 2010 13:32:22 +0000

Chris, this should also parse the ICAPROXY logs, I just have not tried it with ICAPROXY logs.

Give it a try and let me know how it works, I only made the comment because I had not tested it with ICAProxy.

Thanks for visiting the site

John

Comment on Project Poindexter:VPN Logs by Christophe CARE

Christophe CARE — Fri, 15 Oct 2010 13:43:35 +0000

Hi John,

Could you alert me when you will make the ICAPROXY parsing?

Keep the good work!

Cheers,

Comment on Citrix Training: by John M. Smith

John M. Smith — Tue, 12 Oct 2010 12:07:59 +0000

If you look on the left you will see a series of Netscaler Training Videos.